CVE-2020-14184

2020-10-1203:15:14

atlassian

www.cve.org

atlassian

jira

server

cross-site scripting

xss

vulnerability

version 8.5.9

version 8.6.0

version 8.12.3

version 8.13.0

version 8.13.1

issue filter export files

EPSS

0.001

Percentile

29.2%

JSON

Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in Jira issue filter export files. The affected versions are before 8.5.9, from version 8.6.0 before 8.12.3, and from version 8.13.0 before 8.13.1.

CNA Affected

[
  {
    "product": "Jira Server",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "8.5.9",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.6.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.12.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.13.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.13.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

jira.atlassian.com/browse/JRASERVER-71652

EPSS

0.001

Percentile

29.2%

JSON

Related for CVELIST:CVE-2020-14184